Privilege escalation

Sep 03, 2026

Your company brain will leak secrets: how we stopped it for big banks — Tanmai Gopal, PromptQL

Tanmai Gopal, co-founder of PromptQL and creator of Hasura GraphQL, shares insights on building secure and effective 'company brains' for AI agents. He highlights the surprising metric of a continuously rising edit count as a sign of health, dismisses common pitfalls like siloed knowledge, and proposes a human-in-the-loop, unified wiki approach with granular access control and dynamic credential injection to prevent leaks and foster collaborative knowledge creation.

Feb 14, 2026

AI Privilege Escalation: Agentic Identity & Prompt Injection Risks

Grant Miller explains how malicious actors exploit AI systems through privilege escalation, using techniques like prompt injection to compromise over-permissioned AI agents. The summary covers key mitigation strategies, including the principle of least privilege, robust access governance, dynamic context-based access, and continuous monitoring to secure agentic systems.

Jan 17, 2026

Ethical Hacking War Stories: Zero Trust, IAM & Advanced C2 Tactics

Jeff Crume and Patrick Fussell from IBM's X-Force team share a real-world ethical hacking war story, demonstrating an attack from an 'assume breach' perspective. They break down how vulnerabilities in Identity and Access Management (IAM) and legacy systems can lead to a full compromise, starting from an insider threat and escalating to domain administrator privileges through advanced C2 attacks and lateral movement.